Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205037.roa
File: AS205037.roa (raw, json)
Hash identifier: jlxXm1KLQt6SU2ih665A7tCE0Q4yQHRCgYtYxiodzQQ=
Subject key identifier: 9B:E9:90:91:A8:D9:04:B8:65:94:C7:04:50:54:94:63:55:FB:C2:44
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 248EC66C624AF4FFF5F2FAAA5E05C37B22F007E5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205037.roa
Signing time: Tue 13 Sep 2022 01:20:28 +0000
ROA not before: Tue 13 Sep 2022 01:15:28 +0000
ROA not after: Tue 12 Sep 2023 01:20:28 +0000
asID: 205037
IP address blocks: 2a0f:9400:610b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8e:c6:6c:62:4a:f4:ff:f5:f2:fa:aa:5e:05:c3:7b:22:f0:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:28 2022 GMT
Not After : Sep 12 01:20:28 2023 GMT
Subject: CN=9BE99091A8D904B86594C7045054946355FBC244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:88:99:af:32:16:eb:68:a2:ea:69:2c:ac:
31:30:d9:30:dc:1e:d4:37:2c:32:b8:1a:50:9e:3f:
89:1f:2d:ce:e0:9b:4a:43:b2:38:41:5f:b3:57:e8:
40:b1:d0:14:ac:8b:bd:c8:62:47:06:b8:eb:9e:6b:
d3:e1:c3:e7:b8:c4:29:03:6b:2a:fb:98:1a:4e:a6:
cf:4b:7c:49:26:ad:d5:7e:1c:f2:e9:8b:94:4a:4c:
d7:31:f2:33:c0:89:5a:6d:35:05:15:87:08:1d:cb:
da:09:b2:9c:ef:21:31:27:fb:c7:01:56:56:d7:39:
50:d2:ba:09:43:a4:3b:e7:97:83:29:15:7a:7e:8b:
a9:04:72:80:c3:ad:62:4b:b5:f3:2b:b9:47:a4:15:
b7:7a:91:ee:5c:08:0f:f2:be:26:a1:d7:b8:a6:ac:
88:31:44:b9:ee:84:c8:11:da:17:59:df:5b:bb:4a:
00:39:2a:fa:35:e6:e6:73:66:9a:08:82:c0:4b:65:
ca:0f:28:d7:dd:a5:eb:32:f1:9c:5b:12:4d:09:32:
6e:aa:5e:10:27:dd:33:f5:0b:5f:53:a9:f1:58:96:
46:50:84:07:94:41:4c:c3:26:ef:74:b0:50:0b:ac:
49:7c:c2:6f:83:1c:43:71:fd:0e:87:3e:7d:cd:0b:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:90:91:A8:D9:04:B8:65:94:C7:04:50:54:94:63:55:FB:C2:44
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610b::/48
Signature Algorithm: sha256WithRSAEncryption
6d:6b:ad:cc:8f:49:20:bd:5e:aa:a6:f6:bf:6f:ad:ff:76:a7:
53:6a:88:23:8e:ac:a3:6e:66:1e:ef:7c:29:26:49:65:e5:47:
63:f9:f9:4b:2e:77:9a:f9:f7:e6:40:28:5a:ff:0c:c8:d0:1a:
f1:09:32:94:2e:53:db:78:30:af:03:15:bf:fd:9f:c5:7c:b1:
3d:cd:39:3a:83:6d:4a:ad:80:65:be:12:6f:a8:8a:8b:f5:ae:
d4:4e:08:c8:a7:39:fc:c8:c7:37:e1:d4:a1:86:a5:33:82:fa:
36:f4:08:3a:b3:d4:3a:4d:34:eb:c9:a4:af:33:3a:3a:18:ad:
b8:9d:12:a0:ee:86:c1:5c:bf:33:6b:a4:31:62:75:49:cb:45:
4d:b8:07:d1:aa:9c:77:eb:86:c9:11:12:83:d1:a4:6c:06:b6:
73:83:8c:50:70:a3:68:0b:bd:20:5f:f1:3d:35:38:5b:98:04:
3b:1c:33:7a:52:df:24:de:ca:d5:80:ce:70:d7:5a:e2:41:6a:
1e:67:b2:f7:49:86:c1:95:78:0d:2f:9b:31:d1:9c:01:55:1a:
c6:fc:7a:c5:f7:07:8f:ff:b8:70:a9:62:52:d5:69:81:2e:f7:
86:e5:20:f9:f4:1f:aa:85:6e:cc:27:38:05:5c:82:fa:70:22:
a3:2a:d1:cf
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUJI7GbGJK9P/18vqqXgXDeyLwB+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA5MTMwMTE1MjhaFw0yMzA5MTIwMTIwMjhaMDMxMTAvBgNV
BAMTKDlCRTk5MDkxQThEOTA0Qjg2NTk0QzcwNDUwNTQ5NDYzNTVGQkMyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6X4iZrzIW62ii6mksrDEw2TDc
HtQ3LDK4GlCeP4kfLc7gm0pDsjhBX7NX6ECx0BSsi73IYkcGuOuea9Phw+e4xCkD
ayr7mBpOps9LfEkmrdV+HPLpi5RKTNcx8jPAiVptNQUVhwgdy9oJspzvITEn+8cB
VlbXOVDSuglDpDvnl4MpFXp+i6kEcoDDrWJLtfMruUekFbd6ke5cCA/yviah17im
rIgxRLnuhMgR2hdZ31u7SgA5Kvo15uZzZpoIgsBLZcoPKNfdpesy8ZxbEk0JMm6q
XhAn3TP1C19TqfFYlkZQhAeUQUzDJu90sFALrEl8wm+DHENx/Q6HPn3NC5vJAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUm+mQkajZBLhllMcEUFSUY1X7wkQwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNTAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhCzANBgkqhkiG9w0BAQsFAAOC
AQEAbWutzI9JIL1eqqb2v2+t/3anU2qII46so25mHu98KSZJZeVHY/n5Sy53mvn3
5kAoWv8MyNAa8QkylC5T23gwrwMVv/2fxXyxPc05OoNtSq2AZb4Sb6iKi/Wu1E4I
yKc5/MjHN+HUoYalM4L6NvQIOrPUOk0068mkrzM6OhituJ0SoO6GwVy/M2ukMWJ1
SctFTbgH0aqcd+uGyRESg9GkbAa2c4OMUHCjaAu9IF/xPTU4W5gEOxwzelLfJN7K
1YDOcNda4kFqHmey90mGwZV4DS+bMdGcAVUaxvx6xfcHj/+4cKliUtVpgS73huUg
+fQfqoVuzCc4BVyC+nAioyrRzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org